Hardcoded Credential Vulnerability in WN-G300R3 by I-O Data
CVE-2017-2283

8HIGH

Key Information:

Vendor

I-o Data Device, Inc.

Status
Wn-g300r3
Vendor
CVE Published:
2 August 2017

What is CVE-2017-2283?

The WN-G300R3 firmware versions up to 1.0.2 contain hardcoded credentials that can be exploited by an attacker with access to the device. This vulnerability may allow unauthorized execution of arbitrary code, compromising the security and functionality of the device. Users are advised to update their firmware to mitigate this risk.

Affected Version(s)

WN-G300R3 firmware version 1.0.2 and earlier

References

https://jvn.jp/en/jp/JVN51410509/index.html
third-party-advisoryx_refsource_JVN
http://www.iodata.jp/support/information/2017/wn-g300r3_2/
x_refsource_MISC

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-2283 : Hardcoded Credential Vulnerability in WN-G300R3 by I-O Data